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ABSTRACT 

Unlike a terrestrial electric utility which can purchase 
power from a neighboring utility, the Space Station 
Freedom (SSF) has strictly limited energy resources; as 
a result, source control, system monitoring, system 
protection and load management are essential to the 
safe and efficient operation of the SSF Electric Power 
System (EPS). These functions are being evaluated in 
the DC Power Management and Distribution (PMAD) 
Testbed which NASA LeRC has developed at the 
Power System Facility (PSF) located in Cleveland, 
Ohio. The testbed is an ideal platform to develop, 
integrate, and verify power system monitoring and 
control algorithms. 

State Estimation (SE) is a monitoring tool used 
extensively in terrestrial electric utilities to ensure safe 
power system operation. It uses redundant system 
information to calculate the actual state of the EPS, to 
isolate faulty sensors, to determine source operating 
points, to verify faults detected by subsidiary 
controllers, and to identify high impedance faults. 

Source control and monitoring safeguard the power 
generation and storage subsystems and ensure that the 
power system operates within safe limits while 
satisfying user demands with minimal interruptions. 

System monitoring functions, in coordination with 
hardware implemented schemes, pro\ide for a complete 
fault protection system. The objective of this paper is 
to overview the development and integration of the 
state estimator and the source control algorithms. 

INTRODUCTION 

The NASA LeRC PMAD DC Testbed is a reduced 
scale representation of the SSF Electric Power- 
Distribution System (EPS). The testbed program 
objectives include supporting the identification of EPS 
operating scenarios, identifying potential technological 
risks, and evaluating potential control system design 
concepts. A complete description of the development 


and evaluation of the power system testbed to support 
the Space Station program is found in [Ref. 1]. 

CONTROL SYSTEM OVERVIEW 
The DC Testbed control system is hierarchical, consists 
of eleven control nodes, and is based upon a Compaq 
386/20e personal computer (PC) running ADA 
software. The monitoring and control functions, 
implemented in each node, ensure safe and efficient 
system operation. The hierarchical control scheme 
allows the control algorithms to execute quickly, and 
the ADA programming language is to provide a 
flexible platform for efficient control algorithm 
development and implementation. 

Figure 1 is a block diagram of the DC PMAD Testbed 
highlighting the control- and distribution- system 
architectures. At the top of the hierarchical control 
scheme is the Operator Interface System ( OIS) which is 
the main interface to the testbed operators and provides 
some of the functions that the Data Management 
System (DMS) will provide on the SSF. Among these 
functions are testbed software and hardware 
configuration and initialization, power system state 
monitoring, thermal system monitoring, graphical data 
display, command and control of all system 
components. 

The Power Management Controller (PMC) is the EPS 
co-ordinator and its responsibilities, in general, are to 
coordinate the subsidiary controller functions and track 
overall primary distribution system performance. The 
PMC verifies and implements the Short Term Plan 
(STP), initializes the Primary Distribution System , and 
provides power system information to the OIS. The 
PMC communicates with the Subsidiary Level 1 and II 
controllers via an 802.4 token bus network [Ref. 2]. 

The Load Management Controller (LMC), also a 
Subsidiary Level I controller, co-ordinates the 
secondary and tertiary distribution system controllers. 
Its functions in the secondary distribution system are 



similar to the LMC functions, with the exception that it 
does not perform state estimation. 

The Subsidiary Level II controllers are the Main Bus 
Controller (MBC) and the Photovoltaic Controller 
(PVC). The MBC monitors and controls the Main Bus 
Switching Unit (MBSU) and the DC-to-DC Converter 


the SSF-modules and ‘payloads efforts, which are not 
the responsibility of the NASA LeRC. However, 
minimal monitoring and control functions are 
implemented to ensure the safe operation of the testbed 
hardware. 
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Units (DDCUs); similarly, the PVC monitors and 
controls the Battery Charge/Discharge Units (BCDUs), 
the Direct Current Switching Unit (DCSU), and the 
Sequential Shunt Unit (SSU). These controllers 
communicate with the power components through a 
MIL-STD 1553B data bus. 

The Secondary Distribution Controllers (SDC) and the 
Tertiary Power Controller (TPC) are also Subsidiary 
Level II controllers. The SDC and TPC monitor and 
control the secondary and tertiary distribution 
hardware, respectively. The design and development of 
these controllers, as well as that of the LMC, fall within 


SYSTEM MONITORING 
The control system monitoring function is implemented 
by periodically sampling the power system components' 
data, smoothing it, analyzing it for acceptable system 
performance and preparing the necessary messages and 
commands for a given control node. The monitoring 
function requirements are to ensure the safe operation 
of the system; to track energy consumption and storage; 
to detect high-impedance faults; to verify low- 
impedance faults detected by the subsidiary controllers, 
to verify and detect power interruptions, and constraint 
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violations; to smooth data; to track the PDS 
efficiencies; and to provide the OIS with a smoothed 
EPS operating state. Figure 2 shows the 
interdependence of the algorithms discussed in this 
paper. 

Some parameters that must be known accurately are 
source operating points (e.g., peak power point of solar 
array and remaining battery energy) and line currents: 
the former because efficiency and energy availability 
are of concern, and the latter because hardware 
protection is of concern. 

At the local level data is digitally filtered with a third- 
order Butterworth filter, which smoothes the low- 
frequency modulations. This filtered data is used to 
perform such local system protection functions as over- 
and under-voltage detection, over-current detection 
(soft and hard), and hard-fault detection. Soft over- 
currents are current values above the peak anticipated 
level as determined by a Load Flow Analysis (LFA) 
based on the peak demands as defined in the STP; hard 
over-currents are current values over the hardware 
ratings. Hard faults are those current levels which can 
be detected, by the local controllers usirg Kirchoffs 
Current Law and digitally filtered data; that is, current 
differences in excess of a sensors rating (5%). 
Moreover, power-interrupt detection is accomplished 
using two consecutive, unfiltered data points. These 
schemes are the topic of [Ref. 2). 



Algorithms Flow Diagram 
Figure 2 


The SE, running in the PMC, uses redundant, steady- 
state system measurements and sensor statistics to 
calculate the true operating state of the power 


distribution system and to identify unreliable sensor- 
readings. Because the SE gives the "true" operating 
state of the power-distribution system— unlike the Load 
Flow Analysis, which predicts the state based upon a 
priori knowledge of system topology, the reference-bus 
voltage, and loads-better control decisions can be 
made. SE is a weighted-least-squares estimate of the 
power system voltages given a known distribution 
topology. More detailed information about the SE is 
available in many references including [Ref. 4], 

STATE ESTIMATION INTEGRATION into the 
PMAD TEST BED’S ADA SOFTWARE 
ENVIRONMENT 

SE, a Normal Mode algorithm [Ref. 2], is implemented 
in the PMC which, as the EPS co-ordinator, has access 
to all primary-distribution system measurements. The 
measurements sent to the PMC by the PVC and MBC 
controllers are current, voltage, and power readings at 
the SSU, DCSU, BCDUs, and MBSU. 

The integration of the SE, implemented in ADA, is in 
progress and involves the creation of a "State Estimator 
Task" within the ADA runtime monitoring scheme. 
Ideally the SE task is to be run approximately every one 
second; however, due to the computational intensity of 
the algorithm and the complexity and overhead 
involved with the ADA environment, the task initially 
shall be called every ten seconds. 

SOURCE CONTROL 

Source control algorithms are required to efficiently 
and effectively service the user power requirements and 
to ensure the health of the energy storage system. All 
source control algorithms are dependent upon LFA 
results, filtered data, and Short Term Plan information, 
which defines the users' nominal and peak 
requirements over an entire oibit. The source control 
algorithms are used to initialize the source setpoints for 
the next demand period (each being one-minute) and to 
readjust the setpoints, as necessary, during a demand 
period. The focus of this section is the initialization of 
the BCDUs and energy management of the batteries. 

Before describing the BCDU-control algorithms, some 
basic battery and BCDU concepts are given. 

BCDU and BATTERY CONCEPTS 
The BCDUs are bi-directional-power converters which, 
depending upon the BCDU setpoints and primary 
distribution bus voltages, regulate the battery-charge 
current, the bus-discharge current, or the bus voltage. 
The BCDUs have five setpoints which are adjusted by 
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the source-control algorithms, are shown in Figure 2, 
and are as follows: 

(1) The Bus-Voltage Setpoint (BVS) is a 
reference for other modes of operation. These modes 
are the Charge-Reduction and Discharge-Reduction 
Mode. 

(2) The Charge-Current Setpoint (CCS) is a 
charge-current limit into the batteries. The BCDUs 
will regulate the current at this value for bus voltages 
above a given threshold. Below this threshold-equal to 
the DCSU-bus voltage predicted by the LFA of the peak 
demands (P-LFA), but above the BVS-the BCDUs 
enter the Charge Reduction Mode and, thus, allow the 
SSU to regulate the system voltage. 

(3) Deadband Setpoint (DbS) (or Skew Voltage 
Setpoint) keeps the BCDU from oscillating between 
charge and discharge modes. 

(4) Discharge-Current Gain Setpoint (DGS) 
determines the degree to which the BCDU will regulate 
the bus voltage (160V side). 

(5) Discharge-Current Setpoint (DCS) which 
limits the current injection into the primary distribution 
system. 
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Current-vs-Bus-Voltage during Insolation 
Figure 3 


For further information about BCDU operation see 
(Ref. 4J. The batteries and battery simulators used in 
the PMAD testbed have 80AHr Capacities (C) and the 
following constraints are important for battery cycling: 

(1) The batteries must reach 100% State of 
Charge (SoC) by the onset of eclipse. (This mandates 
an accurate means of monitoring the batteries.) Battery 
capacity is a function of many parameters (e.g., 
temperature, cycles, and discharge current) and the 
residual capacity, expressed as SoC, is most readily 
calculated by integrating the battery’ current. Two 
forms of the SoC calculation are as follow’s: 


(a) While charging, some of the 
energy does not reverse the chemical reaction of the 
battery, but is lost as heat; this inefficiency in 
recharging a battery is accounted for by a recharge 
ratio (r.r.). As a result. Equation 1 is used to calculate 
the residua] capacity of the battery. 


SoG„ (%| = SoQt.i, [*] ♦ |00 ,l^»»IA|-AT|sec) 

r.r. * Capacity [Asec] 

SoC Calculation: Charge Mode 
Equation 1 

(b) While discharging, the effective 
capacity of a battery decreases with increased current 
draw, thus the capacity at different operating levels 
must be accounted for and is accomplished according to 
Equation 2. 


SoQ«, (*1 = SoQk-i) |*| ■ 10O lfliM — (t> [ A l*AT[sec] 

Capacity Innwed) [Asec] 

SoC Calculation: Discharge Mode 
Equation 2 

A plot of a typical discharge-time-vs-current of 
batteries is shown in Figure 3. Note that the capacity at 
a given current level is simply found by multiplying the 
current [A] by the timefHrs], 



Discharge Time (Hrs)-vs-Current (Amps) 
Figure 4 

(2) Limit the charge current to the maximum 
allowable. If possible, use a high initial charge current 
value and decrease as the battery approaches full SoC. 

(3) Control charge current so that heat build- 
up is minimized. 
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(4) As the battery SoC approaches 100%, limit 
the current to a "trickle" of 0.0 1C, for example. 

It should be noted that the charge-profile for the 
batteries is not within the scope of this paper and is 
assumed to be given a priori. However, modifications 
can, and are, made to the profile as needed. 


BCDU INITIALIZATION during INSOLATION 
BCDU initialization, using load-flow analysis results 
and battery measurements, is required to ensure that the 
batteries are fully charged by the onset of eclipse. The 
initialization procedure also allows for possible power 
augmentation of the SSU in the presence of heavy 
loading. (Note, however, that the fault identification 
algorithms shall keep the BCDUs from discharging the 
batteries into a fault.) 

Although the programmatic constraints presently 
preclude discharging the batteries during insolation, the 
advantages of allowing such operation, combined with 
the simple algorithm to determine discharge setpoints, 
which still fulfill the 100% SoC requirement at the 
onset of eclipse, justify the possibility of discharging 
during insolation. If discharging during insolation 
remains unallowed, then these algorithms can either be 
modified or the maximum-allowable discharge-current 
values set to zero within the database. That is, the 
algorithms are flexible enough to implement either 
mode. 


SoC [%] 

SoC(fc), 

A 1 

•SoC^ 

1 SoC(n+1]$ | 

• . T .. .. dSoC[(n+2). .tajrgel] 

Energy Available i 

- - 

SoC(n+2)6 ; 

i . i 1 


— 7 1 1 — I 1 V" t 

n ] n+1 n+2 target 

time 


Discharge Capacity Available during (n+l)T 
Time Line 1 


The terms in Equation 3 include: 

SoC(n+\)T-6 ^ minimum expected SoC 
of a battery at the end of the present demand period. It 
is calculated at and assumes that the battery shall 
continue to operate in its present mode. This term is 
abbreviated as SoC 0 ^. 

ASoC(n + l)T j s amount of energy that a 

battery can supply during the next period. It is 


constrained to not fall below the minimum SoC (i.e., 
65%) and still ensure that the battery reach its target 

value based on ASoC[(» + 2) This is refered 

to as "Energy Available" in Time Line 1. 

ASoG(i« + 2 ) .#«*«/] j s th c amount of energy that 
can be guaranteed to be stored from the end of the next 
demand period to the "target" time. 

mt,m + 1 t tz y I 

Cap(Jdisch_Mt,m + ]) 

♦ »r- «]- SoC'Mi .» + ASoC[- + 1 (■*./]}[%] 

6000P&K5(n + 1) 

Discharge-Current Setpoint(n+l) Calculation 
Equation 3 

The initialization process begins by checking the short- 
term plan for the minimum charge-current available to 
charge the batteries in the period [(n+2).. target time] 
and setting the charge-current setpoint values 
according to this value and their relative SoCs. Having 
fixed the charge-current setpoint values in the STP, the 
maximum discharge current— for batteries which have 
reached a minimum SoC of 85%, for example-is 
determined for the next demand period according to 
Equation 3. Because the capacity of a battery is a 
function of its discharge-current magnitude, the current 
is that value which satisfies the ratio in Equation 3, and 
is found in a look-up table. Furthermore, this equation 
is based on the constraint that the STP is implemented 
without modification to the user demands and the 
batteries reach a "target" SoC at the appropriate time. 
Having determined the discharge-current limit upon the 
batteries, the remaining BCDU setpoints are readily 
determined. 

The bus voltage setpoint values are a function of the 
DCSU-voltage predicted by the a load-flow analysis run 
on the peak demands: this is the voltage at which the 
BCDUs are to enter the Charge Reduction Mode-and 
from Figure 2 are seen to be: 


Bus _ Voltage _ Setpo int 


—Chv%e Current _ Setpo int 
Disch arg e_ Current _ Gam 


+ Vdcsu,plfa 


Bus Voltage Setpoint Calculation 
Equation 4 


The deadband values are set to the maximum of one 
volt and the discharge gains are set to the maximum 
slope of 60[A/V] to better regulate the system during 
the heavy-loading (which should be infrequent). 


BCDU INITIALIZATION DURING ECLIPSE 
During eclipse the batteries are the sole sources for 
users’ power requirements. As such, the BCDUs must 
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provide nominal and peaking requirements and must 
regulate the system voltage. Further, in conjunction 
with load-control algorithms and the STP, it regulates 
the energy supplied by the batteries so that energy is 
available throughout eclipse. Ideally, the batteries shall 
supply energy in a balanced manner. Finally, the 
assumptions are made that the discharge-current 
setpoint for the next and subsequent periods is that 
nominal value which would reduce a given battery's 
SoC to its minimum value by the end of eclipse, and 
that batteries have identical SoCs (i.e., 100%) at the 
onset of eclipse. 

Before the initialization of the BCDU setpoints is 
performed, the SoC of each battery is calculated 
according to Equation 2. The battery having the 
highest SoC is referred to as the master and the other 
two batteries are the slaves-, moreover, the associated 
BCDUs are referred to as master and slaves, also. 
These rankings of the SoCs are required to 
appropriately determine the discharge-current setpoints 
of the BCDUs. 

Because the BCDU/battery pairs do not operate 
identically, the SoCs shall drift apart and must be 
"rebalanced." The Discharge-current setpoints shall 
result in a rebalancing of the SoCs. Assuming that the 
BCDU-bus voltages are each equal to the desired 
DCSU voltage of 160V, and by substituting and 
reflecting to the "battery side" the following constraint 

iBCDU.mai = IdCSUjkoti -iBCDU.ilawl - lBCDU,«l«vt2 


into the two battery equations: 
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Simultaneous Equations to Rebalance State of Charge 
Equations 5a and 5b 


gives the required simultaneous equations to determine 
the discharge-current values to rebalance the batteries. 
Again, the discharge-current values are found in a 
look-up table of values. 



Figures 

The discharge-current gain for the master is the slope 
calculated by using the difference between the 
minimum-desired DCSU-bus voltage and the nominal 
voltage as the "run"; the difference between the 
nominal and peak currents is the "rise." The bus- 
voltage setpoint is found by determining the intercept 
of a linear equation. 

SOURCE CONTROL INTEGRATION 
The source control integration process is similar to the 
state estimation. Source control algorithms are 
implemented as Ada tasks and are resident in the PMC. 
The source control software will eventually reside in 
the PVC. 

CONCLUSIONS 

Monitoring and control algorithms are being developed 
to enhance the PMAD DC testbed power system overall 
operating efficiency. Source control algorithms provide 
the benefits of an increased in energy available to the 
users while maintaining stable system operation. State 
estimation techniques are being used to detect high- 
impedance fault in the power distribution system and to 
verify the results of low level fault detection algorithms. 
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